Operationally credible. Strategically fluent.

Experience

Where I've delivered.

Eight years, three organisations, one throughline: security that holds up under audit and under attack.

1. Cyber Security Engineer & Researcher — Security Content & Certifications

   Jan 2022 – Mar 2026

   TryHackMe, Ltd · Remote (London, UK)

   Designed hands-on cybersecurity training and certification content — rooms, modules, and exams — on the world's largest security platform, trusted by 7M+ users globally.

   Certification contributions

   • SAL1 — Security Analyst Level 1: Contributed to TryHackMe's first professional certification from the ground up — scenario-based questions grounded in real SOC operations, hands-on alert-triage and incident-handling simulations, and improvements to the SOC Simulator. The exam covers 150+ questions across governance, risk, incident response, and defensive security.
   • SAL2 — Security Analyst Level 2: Designed advanced practical scenarios for phishing-analysis investigation and EDR triage, requiring candidates to apply real detection-and-response workflows under exam conditions.
   • SEC1 — Cyber Security 101: Developed the Security Operations challenge set — log analysis, threat detection, incident response, and SOC monitoring tools — for a foundational, career-entry certification.
   • SEC0 — Pre-Security: Contributed Attack & Defence strategy content, scenarios, and exam questions for the platform's beginner-entry certification.

   Rooms & content

   • Built and maintained a security content library across detection engineering, DFIR, cyber threat intelligence, SOAR, and EDR triage — using MITRE ATT&CK, Elastic SIEM, SIGMA rules, and Security Onion.
   • Designed training programmes that kept learner drop-off below 6% and contributed to a 20% reduction in cybersecurity incidents through structured threat-analysis training across the platform's learner base.
   • Analysed emerging threat-actor techniques and tooling, translating real adversary behaviour into teachable, hands-on labs for SOC and blue-team practitioners.

2. Cyber Security Engineer

   Jun 2019 – Jan 2022

   Tabiri Analytics, Inc. · Nairobi, Kenya

   • Conducted end-to-end ISO 27001 / NIST 800-53 / CIS security audits for 10 enterprise clients in regulated industries, reaching compliance readiness within engagement timelines.
   • Led risk assessment and monitoring engagements: 40% improvement in client security posture, 20% gain in detection accuracy; authored the executive risk report that helped a client avert a ransomware attack and recover 20+ systems.
   • Deployed Elastic Stack SIEM across Windows/Linux/macOS for 5–80 endpoint clients, enabling continuous threat hunting and anomaly detection.
   • Managed third-party / vendor risk across multi-client portfolios and developed tailored security policies, cutting detection time to within 3 days.

3. Web Application Security Engineer

   May 2018 – Dec 2018

   TeleTracking Technologies, Inc. · Kigali, Rwanda

   Securing a platform used live in clinical environments: patient flow, bed management, capacity operations.

   • Formalised vulnerability management with IBM AppScan: 40% reduction in pre-production defects in 3 months; hardened the telemedicine platform against the OWASP Top 10.
   • Reported compliance status to stakeholders, improving client compliance by 33%; authored 10 information security policies.

Credentials

Certifications & education.